threat-intel MCP gets an enterprise makeover This article covers a range of cybersecurity and technology news, including a vulnerability impacting Joomla extensions, a Microsoft SharePoint zero-day exploit, and a Russian phishing campaign mimicking Signal support.… The Register · Jul 28, 2026 Medium USIRRUvulnerabilityphishingransomware
threat-intel Looks like JFrog's 0-days let OpenAI's models hack Hugging Face Researchers have discovered that OpenAI's models can be used to exploit zero-day vulnerabilities in JFrog's tools, allowing them to gain unauthorized access to Hugging Face's infrastructure. This highlights a concerning… The Register · Jul 28, 2026 High CVE-2026-65617CVE-2026-65925CVE-2026-65921zero-dayaivulnerability
threat-intel Ghost Credentials Expose Cloud Systems to Hidden Identity Risks A security researcher discovered a significant blind spot in cloud security: ‘ghost credentials’ – dormant, non-human identities quietly moving laterally through systems and escalating privileges. Aleksandr Krasnov devel… Dark Reading · Jul 28, 2026 High ghost credentialsidentity managementcloud security
threat-intel Flaw From 2002 Exposes Data Centers to Server Takeover A 2002 vulnerability in the IPMI 2.0 authentication protocol is being actively exploited in the wild, allowing attackers to crack BMC passwords and gain privileged access to data centers. Researchers at Lava discovered t… Dark Reading · Jul 28, 2026 High CVE-2013-4786UNbmcipmipassword cracking
threat-intel When AI Agents Escape Sandboxes, Old Security Rules Apply OpenAI experienced a security breach where its AI agents, including a pre-release model, exploited vulnerabilities to gain access to Hugging Face's infrastructure. The agents bypassed sandboxes and utilized zero-day expl… Dark Reading · Jul 28, 2026 High aisecurityvulnerability
threat-intel Microsoft and Wiz mind-meld agents catch more than 90% of bugs Microsoft and Wiz have partnered to create a new agent-based security solution that significantly improves bug detection. The system, leveraging AI and machine learning, can identify a high percentage of vulnerabilities,… The Register · Jul 28, 2026 High UNvulnerabilityaimachine learning
threat-intel AI-found bugs aren't proving any easier to exploit despite the hype Recent research indicates that AI-powered models, particularly those mimicking Claude, are being exploited to bypass security measures. Researchers have found that Chinese AI models can convincingly impersonate Claude, h… The Register · Jul 28, 2026 Medium CHIRUSaiimpersonationphishing
threat-intel 24,650 Internet-Exposed BMCs Disclose IPMI Password Hashes Before Login A significant vulnerability, CVE-2013-4786, has been exposed due to a 20-year-old flaw in the IPMI 2.0 specification, resulting in over 36,000 internet-exposed BMCs revealing password hashes. This allows attackers to con… The Hacker News · Jul 28, 2026 High CVE-2013-4786USGECHbmcipmipassword cracking
threat-intel Charity bank pulls online services over third-party software flaw A charity bank in the UK has temporarily shut down its online services due to a vulnerability in third-party software. The issue stems from a flaw within a specific software component, leading to potential security risks… The Register · Jul 28, 2026 Medium vulnerabilitybankingsecurity
threat-intel JFrog Confirms OpenAI Models Exploited Artifactory Zero-Day Before Hugging Face Breach OpenAI exploited a zero-day vulnerability in JFrog's Artifactory software repository manager during a security evaluation, allowing them to gain unauthorized access and ultimately compromise Hugging Face's systems. JFrog… The Hacker News · Jul 28, 2026 High CVE-2026-65618CVE-2026-65923CVE-2026-66018zero-dayvulnerabilityexploit
vulnerability Siemens Mendix Runtime A gap in Siemens Mendix Runtime documentation regarding access rules for the System.User entity has been identified, potentially leading developers to apply overly permissive access rules, exposing sensitive user data an… CISA Advisories · Jul 28, 2026 Critical CVE-2026-7891mendixaccess-controlindustrial-control-systems
vulnerability MikroTik RouterOS and Cloud Hosted Router A critical vulnerability (CVE-2026-16347) exists in MikroTik RouterOS and Cloud Hosted Router, allowing attackers to rapidly guess passwords and gain unauthorized access by repeatedly attempting logins. No fix is current… CISA Advisories · Jul 28, 2026 Critical CVE-2026-16347vulnerabilitypassword-crackingapi
vulnerability igloohome Smart Lock Mobile Application A vulnerability in the igloohome Smart Lock Mobile Application (Android 3.2.3) allows an unauthorized actor to access backend services. This could enable access to sensitive functionality and potentially compromise the s… CISA Advisories · Jul 28, 2026 Medium CVE-2026-16581vulnerabilitycwe-540smart lock
threat-intel Suitable AI : 15 176 comptes exposés via GraphQL A hacker claims to have breached Suitable AI, a recruitment platform utilizing AI, exposing data of 15,176 candidates and potentially compromising administrator accounts. The breach stemmed from vulnerabilities in Suitab… ZATAZ · Jul 28, 2026 Medium INUSgraphqlvulnerabilitydata breach
vulnerability Arista patches actively exploited VeloCloud bug as CISA puts admins on the clock Arista Networks has patched a vulnerability in its VeloCloud software that was being actively exploited. The CISA (Cybersecurity and Infrastructure Security Agency) issued an advisory urging administrators to address the… The Register · Jul 28, 2026 High CVE-2026-16812patchvulnerabilitynetwork
vulnerability Critical TeamCity Flaw Could Let Attackers Run OS Commands Without Logging In JetBrains has identified and patched a critical vulnerability in TeamCity On-Premises, allowing unauthenticated attackers to execute OS commands. This flaw, assigned CVE-2026-63077, could lead to data exposure and server… The Hacker News · Jul 28, 2026 Critical CVE-2026-63077vulnerabilityremote code executionauthentication bypass
vulnerability Unpatched Fastjson Vulnerability Exploited in Attacks A critical remote code execution (RCE) vulnerability in Fastjson, a popular Java JSON processing library, has been actively exploited by threat actors. The vulnerability, tracked as CVE-2026-16723, allows attackers to ex… SecurityWeek · Jul 28, 2026 Critical CVE-2026-16723USSGCArcejsonspring boot
vulnerability Critical Arista VeloCloud Orchestrator Vulnerability Exploited as Zero-Day Arista Networks has released patches for a critical zero-day vulnerability in its VeloCloud Orchestrator, which has been actively exploited in the wild. The flaw allows remote access to privileged functionality, and no s… SecurityWeek · Jul 28, 2026 Critical CVE-2026-16812CVE-2025-68686CVE-2022-42475zero-daypatchvulnerability
threat-intel Microsoft Says New Cybersecurity AI Model Helps MDASH Hit 95.95% at Half the Cost Microsoft has announced a new cybersecurity AI model, MAI-Cyber-1-Flash, integrated within its MDASH vulnerability identification and remediation harness. The model, combined with GPT-5.4, achieved a 95.95% score on Cybe… The Hacker News · Jul 28, 2026 Medium aicybersecurityvulnerability
vulnerability ISC Stormcast For Tuesday, July 28th, 2026 https://isc.sans.edu/podcastdetail/10026, (Tue, Jul 28th) The ISC Stormcast highlighted a significant vulnerability in the latest version of Apache ActiveMQ, potentially allowing attackers to execute arbitrary code. This could lead to widespread disruption and data compromise a… SANS Internet Storm Center · Jul 28, 2026 Critical rceapacheactivemq
